Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier: LDUg/7od9C2H3ftP8CGIAUfEYHquOAcvRWLeNGpYsIY=
Subject key identifier: 88:99:9D:DC:6F:D7:AF:55:AB:6E:10:18:FB:90:0B:C4:B3:54:B9:86
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial: 01A13FA77AC204F5CD3FF0E3951CFE6EA23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number: 0D46
Signing time: Thu 15 Oct 2026 13:01:42 +0000
Manifest this update: Thu 15 Oct 2026 13:01:42 +0000
Manifest next update: Fri 16 Oct 2026 13:01:42 +0000
Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: FT5bjokUMzg0qlVV34iw2MtZSWWfzrpleVqEBUcB6qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:7a:c2:04:f5:cd:3f:f0:e3:95:1c:fe:6e:a2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Validity
Not Before: Oct 15 13:01:42 2026 GMT
Not After : Oct 16 13:01:42 2026 GMT
Subject: CN=88999ddc6fd7af55ab6e1018fb900bc4b354b986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:a6:43:bc:ae:23:61:ba:77:4e:ac:37:3f:
1f:bc:0c:4d:0a:2a:73:1a:92:d1:df:f3:0b:0d:0f:
54:06:5c:3f:b9:e6:76:86:2e:ef:98:dd:0c:87:3e:
b2:cb:b0:5a:db:32:6f:4b:2e:9c:88:48:ae:a7:8a:
e5:68:e2:5b:53:cc:8b:95:5c:ec:ad:c2:a7:5d:06:
80:ca:e0:a8:d4:95:0c:3b:7d:5b:0f:00:82:aa:c5:
e2:3d:1e:6b:24:34:69:cc:c6:8a:01:13:06:46:fb:
b8:c1:ce:16:d2:28:bb:95:e1:00:ae:b8:0d:d8:2c:
86:20:71:6b:8c:75:2c:88:49:c0:77:80:a9:31:b4:
bd:fc:9e:ba:97:35:a3:c7:c7:e8:9f:32:87:32:41:
9d:07:a1:87:83:44:ba:cd:a5:e2:58:fe:1c:c4:73:
8d:80:b4:07:77:44:fd:ed:fc:15:cf:30:dd:35:6b:
8d:89:4f:c3:04:f2:07:aa:80:5c:82:a6:36:c0:df:
84:c3:5b:72:11:9c:6e:de:65:2d:b6:41:08:f5:b0:
ed:28:f7:db:b2:a0:e8:b9:0e:35:73:b4:76:2e:81:
93:79:cc:17:06:76:94:b0:5d:74:1a:a3:83:c6:3f:
e0:c4:4c:22:43:aa:d8:da:90:65:8d:2a:1b:60:de:
11:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:99:9D:DC:6F:D7:AF:55:AB:6E:10:18:FB:90:0B:C4:B3:54:B9:86
X509v3 Authority Key Identifier:
keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8c:57:db:24:15:c3:47:fc:82:66:61:e2:f2:6a:35:ae:d9:
97:0f:7c:cf:11:b3:92:46:72:58:a3:43:3d:ac:c9:54:6a:5a:
01:4b:25:9e:58:94:d5:a8:f2:2c:a3:f6:8c:3e:75:da:b3:6e:
36:0c:c5:3c:ab:86:54:21:08:82:41:48:0f:d2:05:5d:f4:74:
0e:0d:27:3c:1c:f9:ab:a1:64:e4:34:e8:e4:b6:37:f0:f8:31:
b9:15:7d:82:71:c7:33:94:c6:80:12:95:14:44:ea:25:e5:de:
35:1c:8c:23:13:d1:5f:6a:01:6a:b4:fb:34:98:73:9b:a0:61:
09:9b:74:24:8b:82:59:ee:a4:38:b5:a2:57:b8:98:91:e3:c7:
31:0c:d0:02:f8:21:4c:c4:27:de:ed:47:39:4a:e6:c1:45:57:
be:d7:32:c1:74:4d:b5:8c:ed:5b:60:9d:4e:66:55:10:da:39:
35:29:3d:1a:4f:ad:67:08:17:5c:e5:52:03:46:03:12:d8:5e:
c9:0e:c8:db:19:5b:a3:4c:ef:29:7e:f3:4d:4b:ab:cb:63:35:
36:71:46:f0:3c:38:e1:f9:1b:6d:1f:d5:db:72:a9:46:4e:c0:
73:88:26:f3:10:6b:9e:65:33:e1:d2:06:6a:24:cf:75:64:c5:
03:cc:10:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:29 2026 by rpki-client